Platform Symphony
Vendor:
First CVE: Nov 6, 2013 · Active for 12 years
8
Total CVEs
More Total CVEs than 85% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 75% of tracked products
6.6
Avg CVSS
Higher Avg CVSS than 33% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Platform Symphony over time
Volume of CVEsAvg CVSS Base Score
First CVE
Nov 6, 2013
12 years ago
Most Recent CVE
Oct 11, 2018
2,845 days ago
CVE Severity & Scoring
Platform Symphony8 CVEs
63%
38%
All CVEs352,713 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network5 (62.5%)
Unknown3 (37.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low5 (62.5%)
High0 (0.0%)
Unknown3 (37.5%)
User Interaction
None4 (50.0%)
Unknown3 (37.5%)
Required1 (12.5%)
Privileges Required
Low5 (62.5%)
High0 (0.0%)
None0 (0.0%)
Unknown3 (37.5%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-1595HIGH IBM Spectrum Symphony and Platform Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to execute arbitrary commands due to improper handling of user supplied input. IBM X | Aug 1, 2018 | 8.8 | 28 | NO | NO |
CVE-2013-5400HIGH An unspecified servlet in IBM Platform Symphony Developer Edition (DE) 5.2 and 6.1.x through 6.1.1 has hardcoded credentials, which allows remote attackers to bypass authentication | Feb 14, 2014 | 10.0 | 25 | NO | NO |
CVE-2018-1702HIGH IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 are vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. | Sep 28, 2018 | 7.1 | 24 | NO | NO |
CVE-2018-1705MEDIUM IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 contain an information disclosure vulnerability that could allow an authenticated attacke | Aug 28, 2018 | 6.5 | 23 | NO | NO |
CVE-2018-1708MEDIUM IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow an authenticated user to obtain sensitive user information such as passwords through the WebUI. IBM X-Force ID: 146343. | Oct 11, 2018 | 6.5 | 22 | NO | NO |
CVE-2018-1704MEDIUM IBM Platform Symphony 7.1 Fix Pack 1 and 7.1.1 and IBM Spectrum Symphony 7.1.2 and 7.2.0.2 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. | Sep 28, 2018 | 5.4 | 20 | NO | NO |
CVE-2013-6305MEDIUM IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it eas | Jan 21, 2014 | 4.3 | 16 | NO | NO |
CVE-2013-5387MEDIUM Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service (process crash or hang) via a malformed SOAP request with a large | Nov 6, 2013 | 4.3 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Platform Symphony
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.1.1 | 5 | 6.9 | 1.5% | 0 | 0 |
| 7.1.0 | 1 | 8.8 | 2.4% | 0 | 0 |
| 7.1 | 4 | 6.4 | 1.3% | 0 | 0 |
| 6.1.1 | 3 | 7.7 | 2.1% | 0 | 0 |
| 6.1.0.1 | 1 | 4.3 | 0.6% | 0 | 0 |
| 6.1.0 | 1 | 10.0 | 2.3% | 0 | 0 |
| 6.1 | 1 | 4.3 | 1.5% | 0 | 0 |
| 5.2 | 3 | 6.2 | 1.5% | 0 | 0 |